VYPR

CWE-322

Key Exchange without Entity Authentication

BaseDraftLikelihood: High

Description

The product performs a key exchange with an actor without verifying the identity of that actor.

Performing a key exchange will preserve the integrity of the information sent between two entities, but this will not guarantee that the entities are who they claim they are. This may enable an attacker to impersonate an actor by modifying traffic between the two entities. Typically, this involves a victim client that contacts a malicious server that is impersonating a trusted server. If the client skips authentication or ignores an authentication failure, the malicious server may request authentication information from the user. The malicious server can then use this authentication information to log in to the trusted server using the victim's credentials, sniff traffic between the victim and trusted server, etc.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (27)

page 2 of 2
  • CVE-2022-39249HigSep 28, 2022
    Matrix Org
    Javascript SDK
    risk 0.42cvss 7.5epss 0.01

    Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some…

  • CVE-2022-39246HigSep 28, 2022
    Matrix Org
    Software Development Kit
    risk 0.42cvss 7.5epss 0.01

    matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms, but this may be…

  • CVE-2026-18654MedAug 3, 2026
    Amazon
    AWS CLI
    risk 0.00cvss 6.8epss 0.00

    Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR…

  • CVE-2026-58065HigJul 13, 2026
    Apache
    Airflow
    risk 0.00cvss 8.1epss 0.00

    The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH host-key verification. An attacker who can intercept the network path between an Airflow worker and the Git server can impersonate the server…

  • CVE-2025-54422MedJul 29, 2025
    Sandboxie Plus
    Sandboxie
    risk 0.00cvss 5.5epss 0.00

    Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.1 and below, a critical security vulnerability exists in password handling mechanisms. During encrypted sandbox creation, user passwords are transmitted via…

  • CVE-2022-39257HigSep 28, 2022
    Matrix Org
    Software Development Kit
    risk 0.00cvss 7.5epss 0.01

    Matrix iOS SDK allows developers to build iOS apps compatible with Matrix. Prior to version 0.23.19, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some…

  • CVE-2022-39255HigSep 28, 2022
    Matrix Org
    Software Development Kit
    risk 0.00cvss 8.6epss 0.01

    Matrix iOS SDK allows developers to build iOS apps compatible with Matrix. Prior to version 0.23.19, an attacker cooperating with a malicious homeserver can construct messages that legitimately appear to have come from another person, without any indication such as a grey…